InCommon Library Services

[Rich Wenger <>]

https://delisle.mit.edu/secure/new.js triggers Shib exactly as you would 
expect.  It appears that JavaScript is not prepared to handle the '302 
redirect' that it sees in response to the onclick event.  It simply does not 
invoke the browser in the way an anchor does.

-Rich

-----Original Message-----
From: 

 
[mailto:]
 On Behalf Of Steven Carmody
Sent: Thursday, June 02, 2011 4:27 PM
To: 

Subject: Re: [inc-librsvcs] Invoking Shibboleth from Javascript

On 5/31/11 3:21 PM, Rich Wenger wrote:
> When I load https://delisle.mit.edu/geoweb/testload.html
> <https://delisle.mit.edu/geoweb/testload.html> and click the Load
> button, I see responses of this kind in the web console:
> [14:49:28.381] GET https://delisle.mit.edu/secure/new.js [HTTP/1.1 302
> Found 31ms]
> but Shibboleth does not intercept the load, and the loaded file does not
> execute. If I move new.js to some other directory and point to it, it
> works fine.
> Should this work, or does Shibboleth not support this for some reason?
> Does anybody have a suggestion for a better way to accomplish a
> Shibboleth authentication cycle from within Javascript?

should work... what happens if you point your browser directly at

https://delisle.mit.edu/secure/new.js

is that doesn't trigger Shib... then perhaps Shib hasn't been properly 
configured to protect that directory ?